COMPUTER EXPERT ASSESSMENT
AND TESTIMONY
In Scotland,
it is normal practice for police forensic experts to produce a Joint Report
summarising computer evidence and conclusions. This report, together with
the Complaint or Indictment, is the normal starting point for defence
investigations. Supporting paperwork such as interview transcripts are also
used where appropriate.

Geode will explain the technical issues and provide an opinion on the
methodology and whether the conclusions are justified and support the
Complaint.

We can arrange to visit the police experts and obtain additional
information if necessary and once permission has been granted. We have
dealt with all of the nine police computer-forensic teams in Scotland
and can usually do this very quickly.

COMPUTER FORENSIC EXAMINATIONS
Geode maintains a comprehensive set of PC forensic tools, including EnCase
6 (the ‘gold standard’ tool for the industry). Our forensic
toolkit is kept under constant review and we maintain a selection of the
same tools used by the police computer crime units. Where necessary we can
undertake our own parallel or complementary examinations.

Where forensic examination is not possible at Geode’s own premises we
are able to examine material on site or make a forensically validated image
on site then examine it at our premises. Note: Examination of evidence held
by the Crown is normally performed on the forensic image rather than the
hard disk itself.

FORENSIC EXAMINATION OF OTHER RELATED DEVICES
Computers come in many shapes and sizes, such as PDAs, GPS units, game
stations, security systems and voice recorders.

Geode will advise on whether we can deal with a particular device on a case
by case basis, or refer onwards if necessary.

DATA CONVERSION
Geode can convert between most audio or video formats likely to be found on
mobile phones or PCs and can produce playable CDs, DVDs or VCR tapes as
required.

We can also read a variety of obsolete media types such as 5.25”
floppies or ZIP disks.

MOBILE PHONE FORENSICS AND EXPERT ADVICE
As with computers, in Scotland
it is normal practice for police forensic experts to produce a Joint Report
summarising all available evidence and conclusions. Geode’s work
commences with this report, plus the Complaint and any supporting paperwork
such as interview transcripts, as appropriate.

Mobile phones appear in a wide variety of cases, either as Crown or defence
productions. We maintain copies of two leading mobile forensic tools
(Cellebrite and XRY) and frequently perform examinations in the field.
Prior notice of the make and model of the phone is usually required.

EVIDENCE
RECOVERY AND CONVERSION
Geode will provide an expert or experts to attend execution of Section 1
civil orders where computer evidence needs to be identified and secured.
Seizure of evidence without such cover increases the chance that evidence
will be overlooked or subsequently declared inadmissible.